121.152.193.222

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
485 reports
109 reporters · latest 5 hours ago
ISP
Korea Telecom
Usage Type
Fixed Line ISP
ASN
AS4766
Domain Name
kt.com
Country
🇰🇷 Korea (the Republic of)
City
Daejeon, Daejeon
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
485 from 109 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 93 🇩🇪 Germany 45 🇫🇷 France 42
Most common categories Port Scan 179 Brute-Force 44 Hacking 44 IoT Targeted 23 SSH 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇦 Slackin' Jack
Triggered honeypot on port 23. (121.152.193.222)
Port Scan
🇫🇷 noi
honeypot proto=TCP dpt=23 flags=SYN hits=1 window=1h
Port Scan
🇧🇷 aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan Hacking
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇩🇪 KPS
PortscanT
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-
Port Scan
🇺🇸 RAP
2026-11-05 22:13:05 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 RAP
2026-11-05 13:54:44 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇦🇹 Pingger Shikkoken
Hacking Brute-Force
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇦🇷 Bruno
Port Scanner: 121.152.193.222
Port Scan
🇺🇸 etu brutus
121.152.193.222 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇯🇵 xamb
Honeypot: 41 Telnet login attempt(s), 1 succeeded, then ran 48 shell command(s).
Hacking Brute-Force IoT Targeted
🇯🇵 xamb
Honeypot: 41 Telnet login attempt(s), 1 succeeded, then ran 48 shell command(s).
Hacking Brute-Force IoT Targeted

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇸 79.117.164.5
🇺🇸 66.132.172.156
🇺🇸 52.200.58.199
🇺🇸 34.172.24.145
🇳🇿 27.252.177.148
🇫🇮 193.187.110.160
🇰🇿 178.90.226.22
🇧🇩 163.227.115.31
🇨🇳 142.86.3.230
🇫🇷 129.151.234.134
🇻🇳 116.99.174.201
🇨🇳 111.56.23.6
🇳🇱 200.138.46.200
🇮🇳 122.179.90.249
🇨🇳 106.13.122.186
🇨🇳 106.12.172.151
feedback